Privacy Policy.

OutPost is operated by Shanie Martin, trading as OutPost, a sole trader in the United Kingdom. Shanie Martin is the data controller for the information described in this policy.

Contact us at hello@outpostsocial.ai. OutPost is registered with the UK Information Commissioner’s Office under registration number ZC166037.

Depending on how you use OutPost, we may collect:

• Account details, including your name, email address and sign-in information.
• Business, brand, audience and voice information supplied during onboarding or later in the app.
• Your briefs, instructions, drafts, media, feedback, preferences, calendar information and publishing choices.
• Authorised social-account details, published-post information and performance metrics.
• For a free audit: your email address, selected social profile, a bounded snapshot of recent public posts and metrics, and the resulting audit.
• Subscription, transaction and billing records. Stripe handles full payment-card details; OutPost does not store them.
• Support correspondence, enquiries, feedback and feature requests you send to us.
• Limited device, security and service-usage information used to operate and protect OutPost and produce aggregate statistics.

Most information comes directly from you. If you connect a social account or request an audit, we receive authorised account information and performance evidence through Zernio and the relevant social platform. We may also receive payment status from Stripe, sign-in details from Google or Apple if selected, and technical information from the systems used to operate OutPost.

If you give us information about another person, you must have a lawful reason to do so. Please do not provide sensitive personal information unless it is genuinely necessary and you are authorised to use it.

We process account, content, connected-account and billing information where necessary to provide the service and perform our contract with you. This includes onboarding, strategy, briefs, audits, scheduling, publishing, billing and support.

We rely on legitimate interests to secure, maintain and improve OutPost, prevent misuse, understand aggregate service performance and learn from grouped content-performance patterns. Those interests are balanced against the impact on you. We rely on legal obligation for records UK law requires us to keep, and on consent where a feature or communication specifically asks for it.

Information required to create and operate an account is contractual. Without it, we may not be able to provide the relevant service. Optional profile detail, connected accounts and marketing choices can be withheld, though some related features will not work. We do not sell personal information.

OutPost sends the relevant brand information, instructions and content context to Anthropic to generate strategies, ideas, briefs, drafts and other requested assistance. This is core to the product.

OutPost is designed to build from your real voice, brand and material, not manufacture a fake version of you. You remain in control of approval and publishing. We do not use your content to train AI models, and OutPost does not make solely automated decisions about you that have legal or similarly significant effects.

We may combine performance signals into anonymised, grouped patterns. For example, which formats tend to improve reach within a broad sector. These patterns do not include your individual content, captions, private figures or anything intended to identify you or your business, and are not formed from a single customer.

You can object to your information being used for this grouped learning at any time by emailing hello@outpostsocial.ai. This objection is separate from your cookie and analytics choices.

We use carefully selected providers to operate OutPost:

• Supabase - database, authentication and private file storage.
• Vercel and Cloudflare - application and website hosting, delivery and security.
• Anthropic - requested AI processing.
• Stripe - subscriptions and payments.
• Zernio - authorised social connections, analytics and publishing.
• Resend - service emails.
• Inngest - secure background processing.
• Google and Apple - optional sign-in when selected.
• PostHog - limited aggregate product analytics, without advertising profiles or session recording.

These providers process information only for the relevant service they supply to OutPost, subject to their applicable data-protection terms. When you direct OutPost to publish to a social platform, that platform receives the content as the destination you selected and handles it under its own terms.

Some providers process information outside the UK, including in the United States. We use an applicable UK adequacy regulation or approved safeguards such as the UK International Data Transfer Agreement or UK Addendum to Standard Contractual Clauses. You can request more information about the safeguard applying to a particular provider by emailing hello@outpostsocial.ai.

• Account and content data: while your account is active. Following an account-deletion request, a 14-day grace period applies before permanent deletion, subject to limited lawful exceptions and protected backup expiry.
• Free-audit information: the social connection expires after 24 hours and the temporary audit session, imported post evidence and result expire after 30 days unless you continue into an OutPost account.
• Billing and tax records: limited records may be retained for up to six years where UK accounting or tax law requires.
• Support, feature requests, rights and complaint records: only for as long as reasonably needed to review the request, resolve the matter, improve OutPost or demonstrate compliance.

Depending on the circumstances, UK data-protection law gives you rights to access, correct, erase, restrict or port your personal information, and to object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time.

To exercise a right, email hello@outpostsocial.ai. We may need to confirm your identity. You may also complain to the Information Commissioner’s Office, although we would appreciate the opportunity to help first.

We use proportionate safeguards including access controls, tenant separation, encryption in transit, restricted administrative access, private file storage, signed access links, authentication controls, backups and incident procedures. No online service can promise absolute security, but we design and operate OutPost to reduce the likelihood and impact of unauthorised access.

OutPost is intended for people aged 18 or over and is not directed at children.

We may update this policy as OutPost, its providers or the law changes. We will update the date at the top and give appropriate notice of material changes.